The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from     hist_field_name() on truncation hist_field_name() returns  everywhere except the fully-qualified     VAR_REF/EXPR case, where snprintf() truncation returns NULL early and bypasses the bottom NULL-> guard.
    Callers don't expect NULL: strcat(expr, hist_field_name(field, 0)) at trace_events_hist.c:1758 and the     strcmp() in the sort-key match loop at :4804 both deref it. system and event_name are bounded by     MAX_EVENT_NAME_LEN, but the field name on a VAR_REF is kstrdup'd from a histogram variable name parsed out     of the trigger string and has no length cap, so a long enough var name in a fully qualified reference can     reach the truncation path. Keep the length check but leave field_name as  on overflow. (CVE-2026-64028)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
364837	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4241)	Nessus	Huawei Local Security Checks	10/12/2026	10/13/2026	high
328194	Linux Distros Unpatched Vulnerability : CVE-2026-64028	Nessus	Misc.	7/20/2026	10/14/2026	medium
364821	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-4057)	Nessus	Huawei Local Security Checks	10/12/2026	10/13/2026	high
364867	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-4148)	Nessus	Huawei Local Security Checks	10/12/2026	10/13/2026	high
364820	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4332)	Nessus	Huawei Local Security Checks	10/12/2026	10/13/2026	high

Detections

Analytics

Plugins Search

high

medium

high

high

high